General
- Target images_20260727_152211.zip
- Size 16KB
- Sample260728-hf34jsfg27
- SHA256 14f1a073150fdd6f6ff6dfc61133fa536697898c23b493fe824e4210afb2bb90
- MD5 fe1451f6f0e1fabd09d1f56d823ca654
- SHA1 4b1e42a82fb15524e5d0f65611b79395c656024a
- SHA512 d3f84cf48865221260740c94ced679293692cad56cba385ad7c402c6f9fec9b1e42c11b80b990cd6d4e4dd553428e7743279320f635152d5387a497b2b74b327
- SSDEEP 384:XZApNMK38YKIAM2gr9VF0DcA/IgjwTz6O:XiZ3DnT2Ec9/xi6O
- TLSH T1E772CF1BE0EF36E3F60AC7A9920208681CC25FC2C4CA9BB81AB5625E37D9571383A151
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20260727_080018.jpg.lnk
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_20260727_080018.jpg.lnk
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target IMG_20260727_080018.jpg.lnk
- Size 1KB
- SHA256 b0d133f9e4e0dd4fd535d6cac2cc6ffd3b6a6f7d7781781a704db11fd31bcdbe
- MD5 0cbf7d2e244e97c700964b2630703540
- SHA1 386d5420dd90ccb01f9dc9aac3e52d7740e68f5c
- SHA512 acd8564ea290219aed1d6b836ae443cd53d6989df50c472848fe7eb3fb519880a59e9cafa3620b3e30fa17a01d781a83d69b23a913073808f32096a802a7b3a6
- TLSH T10521C1151BF20369D6BB8F395876631187217A0EDB599FDF12C092949964120F878F3B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.